[OFBIZ-9174] Update Groovy to 2.4.8 version [CVE-2016-6814]

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Not A Problem
• Affects Version/s: Trunk
• Component/s: framework
• Labels: cve
• Assignee: Jacques Le Roux
• Reporter: Jacques Le Roux
• Created: 15/Jan/17 06:57
• Updated: 03/Jan/19 17:18
• Resolved: 03/Jan/19 17:18

Description

[CVE-2016-6814] Apache Groovy Information Disclosure

See https://www.mail-archive.com/[e-mail]/msg03641.html

There is a security issue but OFBiz OOTB should not be concerned since it's an issue related with deserialisation and we don't use such in OFBiz OOTB. Better to update for users though, not sure if we should backport since we have nothing to fix...